This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa File: QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa (raw, json) Hash identifier: aehrgpL2xP2dBahqiFv4ISh/oHNM2DoxI6dhlxOiSWE= Subject key identifier: 41:4A:A0:B6:7F:A5:27:06:C1:18:D4:3B:B0:EC:54:59:F0:E0:82:44 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D6728AEE080FA58F7F26BCB58A47 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206150 IP address blocks: 146.19.155.0/24 maxlen: 24 2a11:53c6::/32 maxlen: 48 2a11:53c7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:72:8a:ee:08:0f:a5:8f:7f:26:bc:b5:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=414aa0b67fa52706c118d43bb0ec5459f0e08244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a9:2b:0a:7c:e9:1f:5a:7c:3d:08:16:ed:c3: 6d:51:e5:4c:fb:68:d1:5d:02:90:87:10:4b:b7:49: 32:1a:16:fa:aa:be:d7:ec:2f:fc:71:e4:8b:c0:ae: 41:2e:4e:21:ea:b2:97:92:e2:c8:58:a1:a8:25:ed: 24:28:7d:47:28:42:f2:7f:14:6a:0e:ec:eb:df:38: 39:24:3d:d0:03:a1:ca:0e:bd:76:a5:e8:81:5d:85: e6:2a:c4:0e:78:9f:3a:29:06:07:e7:40:c9:18:4f: 2e:34:6b:db:93:78:ce:20:45:91:71:b2:be:45:c8: e9:29:f5:3d:9a:c6:c8:8d:e5:58:6b:ce:d4:d3:b9: 75:a2:16:52:be:8d:70:a4:7f:eb:88:43:3e:e6:6b: 1a:e8:ee:cf:b8:22:c5:ff:c4:a8:62:01:c1:4a:3b: 0c:33:b5:52:43:f8:76:0d:0c:34:6a:68:de:d9:95: 61:a5:85:36:84:7f:84:98:3a:42:9d:05:11:6a:f3: 08:9d:b4:ec:69:a2:ea:81:2a:41:e3:aa:0d:14:3a: 30:87:51:4c:a3:4a:fd:76:26:bb:69:c4:45:f5:75: 66:8d:39:b4:c5:74:17:52:be:3d:e4:e7:f4:57:23: b0:23:1f:92:57:46:96:0a:22:2a:48:b0:45:ee:85: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4A:A0:B6:7F:A5:27:06:C1:18:D4:3B:B0:EC:54:59:F0:E0:82:44 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QUqgtn-lJwbBGNQ7sOxUWfDggkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.155.0/24 IPv6: 2a11:53c6::/31 Signature Algorithm: sha256WithRSAEncryption 4a:24:0e:f4:83:6b:9c:05:88:45:ef:91:1a:9c:81:7d:78:c4: 82:2d:42:22:4e:5e:d7:d0:92:6a:93:26:b5:ca:81:a0:56:be: 9c:70:98:e7:ba:84:95:73:c7:90:53:f8:51:3e:c5:13:19:ef: f4:48:fa:85:14:f0:a2:52:cf:c0:c5:70:d0:bf:fa:00:96:b5: c4:59:16:b1:66:d9:cd:b3:d5:de:f4:4a:aa:e1:67:de:da:76: aa:8e:bf:34:2c:17:0c:d2:34:f8:6d:17:3d:58:23:c6:f7:76: 5c:0a:9e:8f:25:22:55:2d:64:e3:fd:92:93:bc:31:c1:24:47: ee:20:3a:6d:b5:7e:3b:79:64:50:9a:3d:7e:a3:47:f3:2d:b1: 30:86:83:82:9c:f4:79:d8:32:f8:52:32:0a:f5:4b:44:df:54: 99:1a:9a:1a:68:12:d0:85:7f:53:9e:32:a0:26:84:63:30:79: 28:2f:40:ec:75:5a:40:3f:78:0d:f4:3d:24:41:37:9f:4a:52: 59:15:a6:8d:e0:75:17:6e:e5:37:9e:9d:d0:04:02:af:89:30: d5:97:de:8f:17:3e:18:d5:ac:2b:66:94:f5:06:ea:9f:1c:66: f6:86:d6:f1:02:0b:81:62:7c:57:01:5b:e2:ac:63:22:8c:8e: 44:1e:d2:40 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ONZyiu4ID6WPfya8tYpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTRhYTBiNjdmYTUyNzA2YzExOGQ0M2JiMGVjNTQ1OWYwZTA4MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqkrCnzpH1p8PQgW7cNtUeVM+2jR XQKQhxBLt0kyGhb6qr7X7C/8ceSLwK5BLk4h6rKXkuLIWKGoJe0kKH1HKELyfxRq Duzr3zg5JD3QA6HKDr12peiBXYXmKsQOeJ86KQYH50DJGE8uNGvbk3jOIEWRcbK+ RcjpKfU9msbIjeVYa87U07l1ohZSvo1wpH/riEM+5msa6O7PuCLF/8SoYgHBSjsM M7VSQ/h2DQw0amje2ZVhpYU2hH+EmDpCnQURavMInbTsaaLqgSpB46oNFDowh1FM o0r9dia7acRF9XVmjTm0xXQXUr495Of0VyOwIx+SV0aWCiIqSLBF7oVnwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEFKoLZ/pScGwRjUO7DsVFnw4IJEMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvUVVxZ3RuLWxKd2JCR05RN3NPeFVXZkRnZ2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhObMA0E AgACMAcDBQEqEVPGMA0GCSqGSIb3DQEBCwUAA4IBAQBKJA70g2ucBYhF75EanIF9 eMSCLUIiTl7X0JJqkya1yoGgVr6ccJjnuoSVc8eQU/hRPsUTGe/0SPqFFPCiUs/A xXDQv/oAlrXEWRaxZtnNs9Xe9Eqq4Wfe2naqjr80LBcM0jT4bRc9WCPG93ZcCp6P JSJVLWTj/ZKTvDHBJEfuIDpttX47eWRQmj1+o0fzLbEwhoOCnPR52DL4UjIK9UtE 31SZGpoaaBLQhX9TnjKgJoRjMHkoL0DsdVpAP3gN9D0kQTefSlJZFaaN4HUXbuU3 np3QBAKviTDVl96PFz4Y1awrZpT1BuqfHGb2htbxAguBYnxXAVvirGMijI5EHtJA -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:30 2026 by rpki-client